Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2117d436-e721-3683-8bed-0b5aeb0a6924.roa
File:                     2117d436-e721-3683-8bed-0b5aeb0a6924.roa (raw, json)
Hash identifier:          xmAHXZ7UBRxxKcU91oVYYxPfJ4PhFSpqPMscsIPjyy4=
Subject key identifier:   C1:22:10:75:21:C1:2C:F5:B5:F1:76:3C:62:F2:02:11:3A:ED:10:91
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F432858409A7DFE91542620FA68A34020
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2117d436-e721-3683-8bed-0b5aeb0a6924.roa
Signing time:             Mon 16 Jan 2023 12:00:00 +0000
ROA not before:           Mon 16 Jan 2023 12:00:00 +0000
ROA not after:            Tue 21 Feb 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        136.14.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:9a:7d:fe:91:54:26:20:fa:68:a3:40:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 16 12:00:00 2023 GMT
            Not After : Feb 21 05:00:00 2023 GMT
        Subject: CN=b8464066-49cb-4a5b-b4af-f942bf458124
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:cd:71:04:37:0e:f3:08:b6:dc:04:ea:87:43:
                    0a:41:30:59:9b:d2:c8:12:f8:ed:24:1f:2d:51:51:
                    1d:af:05:3d:84:a3:95:5a:de:b3:a0:c0:ea:f4:3e:
                    2a:b3:a9:e8:6f:79:9f:b9:21:75:9e:a8:14:e2:c9:
                    36:ce:f1:d2:bf:f2:79:27:d1:b7:34:ca:3b:ee:f2:
                    7b:97:2c:c8:4a:4e:6b:05:c0:56:1e:ec:d1:f8:9d:
                    9e:ab:31:85:24:bc:01:25:cc:82:f4:0a:8d:9b:e4:
                    db:4e:d3:50:2f:ae:87:51:60:cc:17:24:ac:f0:bd:
                    a7:66:e7:f1:d4:d7:03:05:08:48:f6:0f:ae:fd:96:
                    d7:b9:b6:cf:62:c9:95:80:e7:7e:9e:f9:e1:d5:a4:
                    7f:b2:9f:75:6d:4a:03:3e:d3:7b:48:32:f6:3a:5f:
                    f5:9c:18:93:8e:06:c9:85:2a:aa:bd:71:64:b3:55:
                    11:63:d1:b3:69:11:c0:af:d4:51:3c:db:fc:f9:c3:
                    70:dc:5d:6b:0b:e1:23:94:44:42:0a:e3:3a:aa:2a:
                    ec:a6:e6:68:51:2a:cf:60:a5:ed:95:39:06:80:d6:
                    e7:85:7d:97:3a:5e:6c:f0:f3:37:2a:3e:b6:f2:ec:
                    d9:0e:07:a0:6c:bc:6d:f5:d3:0d:8f:c5:58:40:b5:
                    05:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:22:10:75:21:C1:2C:F5:B5:F1:76:3C:62:F2:02:11:3A:ED:10:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2117d436-e721-3683-8bed-0b5aeb0a6924.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.14.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:da:f1:3c:17:ce:63:ce:2a:73:7f:7c:0b:e7:4b:83:e3:7f:
         40:45:c3:1d:93:f3:fb:3d:f0:e0:ba:d2:46:ac:3a:10:9a:3c:
         dc:f5:a0:59:57:98:cf:82:8d:0a:23:70:f9:45:70:5b:e5:b8:
         58:da:66:3a:2f:ea:b0:29:12:dd:b0:cb:9e:77:d5:ae:ba:19:
         0d:bc:4f:83:4e:72:50:54:3b:c9:41:00:03:11:fa:22:82:7b:
         5c:6f:66:43:20:b8:7a:bf:b9:7f:26:41:f3:8d:d1:c1:b6:59:
         c7:19:18:e0:de:72:ae:77:e6:27:d3:5b:d4:cf:dc:6b:b4:3e:
         b4:27:a2:29:23:4a:24:fd:c3:0b:75:e6:8d:8c:f1:10:4f:bd:
         1c:10:54:d7:c0:d4:2f:0f:3b:7b:44:cf:1a:1a:43:3f:7c:68:
         a5:a8:fd:d3:e3:5d:b1:b2:ac:3a:3f:03:f7:c9:c5:af:fc:89:
         4e:5b:5d:3d:52:a2:15:4f:67:99:d0:e3:6b:6a:67:9e:72:5b:
         b0:a9:05:6b:1e:4f:21:3b:5e:0f:1f:10:7f:22:32:ca:74:d0:
         6e:c4:41:f7:d2:f4:29:89:24:15:0c:5a:68:42:f5:39:88:15:
         06:74:44:13:77:ca:0a:45:ee:05:91:99:57:f6:ba:f9:31:62:
         29:13:e3:65
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWECaff6RVCYg+mijQCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIzMDExNjEyMDAwMFoXDTIzMDIyMTA1MDAwMFowLzEtMCsGA1UEAxMk
Yjg0NjQwNjYtNDljYi00YTViLWI0YWYtZjk0MmJmNDU4MTI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjM1xBDcO8wi23ATqh0MKQTBZm9LIEvjtJB8t
UVEdrwU9hKOVWt6zoMDq9D4qs6nob3mfuSF1nqgU4sk2zvHSv/J5J9G3NMo77vJ7
lyzISk5rBcBWHuzR+J2eqzGFJLwBJcyC9AqNm+TbTtNQL66HUWDMFySs8L2nZufx
1NcDBQhI9g+u/ZbXubbPYsmVgOd+nvnh1aR/sp91bUoDPtN7SDL2Ol/1nBiTjgbJ
hSqqvXFks1URY9GzaRHAr9RRPNv8+cNw3F1rC+EjlERCCuM6qirspuZoUSrPYKXt
lTkGgNbnhX2XOl5s8PM3Kj628uzZDgegbLxt9dMNj8VYQLUFdwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFMEiEHUhwSz1tfF2PGLyAhE67RCRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMjExN2Q0MzYtZTcyMS0z
NjgzLThiZWQtMGI1YWViMGE2OTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBiA4wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEADNrxPBfOY84qc398C+dLg+N/QEXDHZPz+z3w4LrSRqw6EJo83PWgWVeY
z4KNCiNw+UVwW+W4WNpmOi/qsCkS3bDLnnfVrroZDbxPg05yUFQ7yUEAAxH6IoJ7
XG9mQyC4er+5fyZB843RwbZZxxkY4N5yrnfmJ9Nb1M/ca7Q+tCeiKSNKJP3DC3Xm
jYzxEE+9HBBU18DULw87e0TPGhpDP3xopaj90+NdsbKsOj8D98nFr/yJTltdPVKi
FU9nmdDja2pnnnJbsKkFax5PITteDx8QfyIyynTQbsRB99L0KYkkFQxaaEL1OYgV
BnREE3fKCkXuBZGZV/a6+TFiKRPjZQ==
-----END CERTIFICATE-----